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Question: 1 


Which two commands are used to query the arp-table of a logical switch? (Choose two.) 


A. get logical-switch <logical-switch-uuid> arp-table 
B. get logical-switch <vni> arp-table 

C. get logical-switch arp-table <vni> 

D. E. get logical-switch arp-table 


Answer: A,B 


Question: 2 


When a stateful service is enabled for the first time on a Tier-O Gateway, what happens on the NSX 
Edge node? 


A. SR and DR doesn't need to be connected to provide any stateful services. 
B. SR is instantiated and automatically connected with DR. 

C. SR and DR is instantiated but requires manual connection. 

D. DR is instantiated and automatically connected with SR. 


Answer: B 


Question: 3 


Refer to the exhibit: 
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Refer bo the exhibit. 
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Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to 
allow Web VM to initiate communication with public networks? 


A. Reverse NAT 
B. SNAT 

C. 1:1 NAT 

D. DNAT 


Answer: D 
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Question: 4 


A security administrator needs to configure a firewall rule based on the domain name of a specific 
application. 
Which field in a distributed firewall rule does the administrator configure? 


A. Policy 

B. Profile 
C. Service 
D. Source 


Answer: B 


Explanation: 

On the Profile page, choose which profiles to apply the rule to. For most servers, you should apply 
the rule to all three profiles, because servers are usually continually connected to a single network. 
For mobile computers in domain environments, you typically need to apply firewall rules only to the 
Domain profile. 


Question: 5 


What are two supported VPN configuration types in a NSX-Y Data Center? (Choose two.) 


A. OpenVPN 
B. MPLS 

C. L3VPN 

D. L2VPN 

E. SSLVPN+ 


Answer: C,E 


Question: 6 


An NSX administrator is applying QoS to guarantee bandwidth for critical production workloads. 
Which three actions must be taken? (Choose three.) 


A. Edit the exported JSON file. 

B. Export transport node NIOC profile. 

C. Create a QoS segment profile. 

D. Specify QoS parameters. 

E. Change Segment QoS profile. 

F. Upload the JSON file and apply configuration. 


Answer: B,C,D 
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Question: 7 


A customer is planning deployment of a third-party OpenStack application. 
Which is used to grant permissions to the application on NSX Manager? 


A. Guest Identity 

B. Cloud Identity 

C. Principal Identity 
D. API Identity 


Answer: D 


Explanation: 

The Enterprise Administrator role gets the same access to the NSX Manager appliance and the API as 
the NSX Manager admin user. The other NSX roles get read-only access to the NSX Manager 
appliance and the API. 


Question: 8 


What are three functions of a Tier-O Gateway in a multi-tenant service provider environment? 
(Choose three.) 


A. acts as a default gateway for the tenant workloads 

B. enables east-west connectivity to the tenant workloads 
C. interconnects the Tier-1 gateways of multiple tenants 

D. provides isolation between the tenants 

E. provides first-hop routing for the tenant workloads 

F. enables north-south connectivity to the tenant workloads 


Answer: C,D,F 


Question: 9 


Which CLI command is used to start the NSX Manager virtual machine in the KVM environment? 


A. virsh start <NSX-Manager-Name> 

B. B. virsh poweron <nsx-manager-name> 
C. virsh poweron <nsx-manager-ID> 

D. virsh start <NSX-Manager-ID> 


Answer: A 


Question: 10 
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What are the supported N-VDS modes? 


A. DPDK Datapath 

B. Enhanced Datapath 
C. Overlay Datapath 
D. Standard Datapath 
E. Secure Datapath 


Explanation: 


N-VDS Mode: There are 2 modes for N-VDS: Standard or Enhanced Datapath. 
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Answer: B,D 
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